WS
Product
Windows Server 2008 R2 Service Pack 1 (Server Core installation)
by Microsoft · last CVE Oct 14, 2025
On CISA KEVExploited in the wildRansomware-linked
136
CVEs
60
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 113Medium 20Low 1
Watch

Add Windows Server 2008 R2 Service Pack 1 (Server Core installation) to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-43451
In wildKEV
6.5
84%
Nov 12
NTLM Hash Disclosure Spoofing Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.27415
CVE-2022-26925
In wildKEV
5.9
10%
May 10
Windows LSA Spoofing Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.25954
CVE-2025-24991
In wildKEV
5.5
2%
Mar 11
Windows NTFS Information Disclosure Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.27618
CVE-2023-36563
In wildKEV
5.5
20%
Oct 10
Microsoft WordPad Information Disclosure Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.26769
CVE-2021-41379
RansomwareIn wildKEV
5.5
19%
Nov 10
Windows Installer Elevation of Privilege Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.25769
CVE-2013-3900
In wildKEV
5.5
45%
Dec 11
WinVerifyTrust Signature Validation Vulnerability
Affected: All versions, or not specified
CVE-2025-24054
In wildKEV
5.4
62%
Mar 11
NTLM Hash Disclosure Spoofing Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.27618
CVE-2024-38217
In wildKEV
5.4
10%
Sep 10
Windows Mark of the Web Security Feature Bypass Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.27320
CVE-2023-36584
In wildKEV
5.4
3%
Oct 10
Windows Mark of the Web Security Feature Bypass Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.26769
CVE-2022-38032
6.6
1%
Oct 11
Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.26174
CVE-2024-38234
6.5
1%
Sep 10
Windows Networking Denial of Service Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.27320
CVE-2022-35770
6.5
2%
Oct 11
Windows NTLM Spoofing Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.26174
CVE-2022-37977
6.5
2%
Oct 11
Local Security Authority Subsystem Service (LSASS) Denial of Service Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.26174
CVE-2022-38033
6.5
2%
Oct 11
Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.26174
CVE-2024-38256
5.5
1%
Sep 10
Windows Kernel-Mode Driver Information Disclosure Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.27320
CVE-2022-38043
5.5
1%
Oct 11
Windows Security Support Provider Interface Information Disclosure Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.26174
CVE-2022-38026
5.5
1%
Oct 11
Windows DHCP Client Information Disclosure Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.26174
CVE-2022-37985
5.5
39%
Oct 11
Windows Graphics Component Information Disclosure Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.26174
CVE-2022-34708
5.5
2%
Aug 9
Windows Kernel Information Disclosure Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.26065
CVE-2022-37981
4.3
3%
Oct 11
Windows Event Logging Service Denial of Service Vulnerability
Affected: 6.1.7601.0 before 6.1.7601.26174
Showing 20